Cisco WAN :: 891 - Configuring Porting Between Interfaces
Apr 12, 2013
I'm having some trouble configuring porting between interfaces.Here is my situation.I have a Cisco 891 router. What I need is to create 3 interfaces with the next IPs:
1. Port FastEthernet 8 - 20.40.1.1 - with a modem connected directly to it - 20.40.1.2
2. Port GigabitEthernet 0 - 193.2.5.100 - connected to a switch - LAN
3. Ports FastEthernet 0 and 1 for two VOIP phones - 190.168.5.2 and 190.168.5.3 - will be switchported to VLAN 10 - 190.168.5.1
I can send ping from a PC (193.2.5.1) to the modem interface (20.40.1.1) but not to the modem itself (20.40.1.2).I played days with configurations and tried a lot of variation of ip routing and access-lists with no success.Basically I need to comunicate freely betwin all the devices.There are a lot of forums providing solutions to a same problems but they seems not working with the 891 router. Any way, assuming I have a factory resetted router? [code]
I have been configuring the SG-300 28 from both web and cli interfaces.When doing a sh run I get Int gi2 before int Gi1? WTF?Also one of my vlans wasn't working on interfaces but was working through the assigned trunk port to my other switch.I deleted it and recreated it and it is now working. Why we have a failure and go to reconfigure a switch and have these same issues.
configuring my Cisco 2951 router. There are three routed interfaces that I need to configure: one for the internal LAN, the second for another private subnet that connects to a Data Centre and the third for the WAN connection. I have configured the Ge0/0 interface as the LAN interface with the internal network 10.17.0.0/24. I have also configured my WAN interface Ge0/1 for internet connectivity. Now, I need to configure the third interface Ge0/2 that will connect to the Data Centre. This will be a private point to point switched ethernet link. The Data Centre will host a secondary domain controlller. So, I want it to be on the same network as the internal LAN, i.e., 10.17.0.0/24. I want to be able to see all other devices that will be located at the Data Centre just like I would see all devices connected to the internal LAN.The problem I am facing is that Cisco 2951 does not allow me to configure two routed interfaces to be on the same subnet. Is there any way to work around this problem and configure both the internal LAN and the Data Centre private network to be on the same subnet.
I have managed to simulate to Cisco ASA's on GNS3 - ASA1 and ASA2. ASA2 is configured as multiple mode to enable contexts while ASA2 has been configured as single mode.
On ASA2 I can assign an IP address to its gigabitethernet interfaces as normal, however I'm unable to assign an interface to the gigabitethernet interfaces on ASA1.
how to port configuration from a cisco 2950 to a zyxel gs1910. the configuration on the cisco is pretty staright forward. I need to configure an uplink port to the router which can handle all VLAN which currently looks like this
I've got router as vpn-concentrator which receives vpn site-to-site connections from 10 branches with cisco 881 and cisco 1941.I started cacti monitoring and found out that there are too many errors on interfaces.URL.
I have an ASA connected to 2 ISPs.I am using object tracking for the default route so only 1 path is used at a time. I have a L2L VPN setup going out interface A. I would like to configure a 2nd VPN going out interface B with identical parameters.
(ASA software 8.2)
crypto map PATH_A 1 match address outside_1_cryptomap crypto map PATH_A 1 set peer 10.1.1.1 crypto map PATH_A 1 set transform-set ESP-AES-128-SHA crypto map PATH_A 1 set security-association lifetime seconds 28800 crypto map PATH_A 1 set security-association lifetime kilobytes 4608000 crypto map PATH_A 1 set reverse-route
We are using non-advertised IPs on many devices, but LMS is attempting to ping these addresses and setting off all sorts of security alarms. How to stop LMS 4.1 from pinging the interfaces? We don't even want LMS to do any fault monitoring so if that could be turned off, it would be even better.
I am trying to secure sub interfaces on a 2600 Router
interface FA0/1.1 No Access-group
Interface FA0/1.2 IP Access-group 110 out
Access-list 110 deny ip 2.2.2.0 0.0.0.255 1.1.1.0 0.0.0.255 Access-list 110 permit ip any any
This works but it blocks traffic both ways I only want to block one, I dont want FA0/1.2 to be able to access FA0/1.1 but I want all traffic to be allowed to go the other way
Does any know why the ASA will monitor physical interfaces by default, but monitoring of logical interfaces is disabled by default? Or better yet, is anybody doing a monitor-interface for a subint without issue? I'd imagine it isn't enabled by default for a reason.
I understand that IPv6 uses the MAC address of a LAN interface to make up the EUI-64 of a serial interface since serial interfaces don't have MACs. What happens when there is no LAN interface available? What if the switch has only serial interface cards?
LMS 4.2. I am receiving the alert below in my email inbox. It was my understanding that DFM would not send alerts for interfaces that are shut down. Is this a bug? [code]
I have a question, it is possible to have two WAN interfaces to configure a cisco 892 router with an ip 255.255.240.0 84.197.167.111 adderess of the first interface and a different ip address 84.197.174.182 255.255.240.0 on the second interface
I have a location where I have 2 WAN links, but without a dynamic routing protocol in between. I want to implement a kind of hub to 2 spokes VPN. But the spokes will actualy be on one single ASA firewall, each spoke on a different interface. One hub-spoke will be primary, the other one the secondary. When the WAN link for the primary VPN fails the secondary should be started on the hub to the other spoke.
I'm trying to get two Cisco 1941 routers with HWIC-1T and HWIC-3G-HSPA interfaces to use the 3G interfaces if the frame is down (as it is right now).In the lab, I was not able to get these to use the 3G interfaces as a backup (i.e. backup interface cell 0/1/0) and I've not been able to workout the correct incantation for static routing either.
kununurra#show ip int br d1 Interface IP-Address OK? Method Status Protocol Dialer1 172.31.2.94 YES IPCP up up
I've installed the ACS version 5.2 in a VMware platform and everything seemed fine but in the post installation task I need to access to the GUI. Based on the documentation I should access the "https://10.0.0.X/acsadmin" on my browser's url but after I hit enter nothing comes up, there's just a whiter web page. Is there any missing configuration that I need to do and that it is not on the configuration pages?
Is there a limitation to the amount of sub-interfaces that can exist on a Cisco 6509? The switch has WS-SUP720-3B (Sup card), WS-X6724-SFP (linecard), and 12.2(33)SXH7 (IOS).
If I have a PI 1.2 system that has multiple interfaces configured I can upgrade to PI 1.3 and both interfaces remain and I can see both under the admin webpage under appliance interfaces. But if I do a fresh install of PI 1.3 I can only configure one interface. The commands fail from the cli to configure anything but gigabitethernet 0. Are multiple interfaces not supported in PI?
My problem includes little bit design issue.I have site2site vpn between customer and my cisco router.But the customer wants to add L2TP traffic in this site2site tunnel.I have no experince about L2TP tunneling.I have also ASA 5500 series which locates behind the Cisco router.ASA interfaces have not public IP.Question is that Can I use my ASA firewall for just L2TP tunelling?Every document says ASA use IPSEC over L2TP. But IPsec tunneling is already done by Cisco Router. Or should I have to do both tunnel in same network device? I mean ASA or Router?
I want to implement QoS on our Core router but the core router makes use of GRE Tunnels to remote branch locations.so far all QoS techniques i want to use cannot be implemented using tunnel interfaces.
the core router is a cisco 7604 router with IOS version 12.2 (33)SRE while the remote locations have ISRs (2821).
Which QoS technique to use with respect to GRE Tunnels as there are times of congestion due to heavy network traffic to those remote locations.
Having upgraded to 8.3 from 8.2 I and read much about the differences , it seems that 8.3 deals with NAT in a much more managed method.However I am confused on how one would NAT a network object to multiple interfaces? i.e I know you can specficy a NAT adddress within the network object howeveer this only allows you to specific a single IP address.What if I want to talk accross multiple interfaces how would I specify this?
i have an ASA 5520 running ver 8.4(1). have attached my interface config below and need to do the following, NAT traffic coming on GigabitEthernet0/2.101 to GigabitEthernet0/1, i.e. packets with destination 10.21.110.25 will be forwarded to 10.11.21.25, will a nat (Production,Advocate_MPLS) static ... statement work ?
------------------------------------------------------------------------ interface GigabitEthernet0/1 description Production nameif Production security-level 100(code)
I have put 2 physicl interfaces (te0/8 & 9) on the ASA-5585 into a PO and am assigning ips/vlans to the sub-interfaces. I have 2 issues: - Why am I not able to ping the other sub-interface from the ASA itself? (I can ping the 1st one), Secondly, why the IPs are not visible in "sh int ip brief" ?Although I can see them in "sh ip" ..
/actNoFailover(config-if)# int po17.100 /actNoFailover(config-subif)# vlan 100 /actNoFailover(config-subif)# ip add
I actually starting to work on a cisco project. I'm a beginner on networking and cisco technologie.
For my project we use a router 2921. We got two network: - Network A: 192.198.0.X / 255.255.255.0 / Gateway 192.198.0.1 - Network B: 162.168.0.X / 255.255.0.0 / Gateway 162.168.0.1
Each network use switch, Switch A (connecting to network A) is connected to interface G0/0. And Switch B (connecting to network B) is connected to interface G0/1.
Router well configured as: - G0/0: ip address 192.198.0.1 255.255.255.0 (network A) - G0/1: ip address 162.168.0.1 255.255.0.0 (network B) Every think working fine.
The problem is with this one, we need to connect a computer on G0/2. This computer is configure as network A (192.198.0.10 / 255.255.255.0 and same gateway).I can't configure G0/2 as 192.198.0.1 255.255.255.0 (network A), cause G0/0 use this adresse.I can't put this computer on the switch A, my only physical possibilité is to connect him on G0/2.We just need to use interface G0/0 and G0/2 as a switch on the router with the same gateway (192.198.0.1)
How can i connect this computeur? How can i configure two interfaces on the same network and same gateway?
Do i need to create 2 objects for nating a server to 2 different interfaces?That is an inside server published in two different dmzsAutomatic migration to 8.3 creates 2 objects (one for each nat)Can I do the same with only one object? like this or I need an object for each nat?
I have a WLC with, let´s say, 30-40 AIR-LAP1142N-E-K9. Since last November the following issue happened 3 times. One of the APs (it´s always the same unit) remains online but both WiFi interfaces appear down. I´m unable to put it back UP like if they were disabled. Then i have to reboot the AP and it starts working again.
What could be happening? Should i open an RMA for this unit?
I just need to start building the configuration of an ASR 1001 but I do not know how gigabitethernet interfaces are named on these routers? Are Gi0/0/X or Gi0/X ??
